Free 2021 HCNA-Security H12-711-ENU dumps are available on Google Drive shared by TestPDF
Welcome to download the newest TestPDF H12-711-ENU PDF dumps: https://www.testpdf.com/H12-711-ENU-exam-braindumps.html ( 290 Q&As)
NEW QUESTION 106
About the contents of HRP standby configuration consistency check, which of the following is not included?
- A. Next hop and outbound interface of static route
- B. NAT policy
- C. If the heartbeat interface with the same serial number configured
- D. Certification strategy
Answer: A
NEW QUESTION 107
Which of the following is wrong about the scanning of vulnerabilities?
- A. Vulnerabilities can be avoided
- B. The vulnerability was discovered beforehand and discovered afterwards.
- C. Vulnerabilities are generally repairable
- D. Vulnerabilities are security risks that can expose computers to hackers
Answer: A
NEW QUESTION 108
In stateful inspection firewall, when opening state detection mechanism, three-way handshake's second packet (SYN + ACK) arrives the firewall. If there is still no corresponding session table on the firewall, then which of the following statement is correct?
- A. If the firewall security policy allows packets through, then creating the session table
- B. packets must pass through the firewall, and establishes a session table
- C. packets must not pass through the firewall
- D. If the firewall security policy allows packets through, then the packets can pass through the firewall
Answer: C
NEW QUESTION 109
When configuring NAT Server on the USG series firewall, the server-map table will be generated. Which of the following does not belong in the table?
- A. Destination IP
- B. Source IP
- C. Agreement number
- D. Destination port number
Answer: B
NEW QUESTION 110
Which of the following is the username / password for the first login of the USG series firewall?
- A. Username admin, password Admin@123
- B. User name admin, password admin@123
- C. User name admin, password admin
- D. User name admin, password Admin123
Answer: A
NEW QUESTION 111
Which of the following mechanisms are used in the MAC flooding attack? (Multiple choice)
- A. ARP learning mechanism
- B. Number of MAC entries is limited
- C. forwarding mechanism of the switch
- D. MAC learning mechanism of the switch
Answer: A,B,C,D
NEW QUESTION 112
Regarding the firewall security policy, which of the following options are wrong?
- A. When configuring the security policy name, you cannot reuse the same name.
- B. If the security policy is permit, the discarded message will not accumulate the number of hits.
- C. Adjust the order of security policies without saving the configuration file.
- D. The number of security policy entries of Huawei USG series firewalls cannot exceed 128.
Answer: B
NEW QUESTION 113
Which of the following are key elements of information security prevention? (Multiple choice)
- A. Security operation and management
- B. Asset management
- C. Security products and technologies
- D. Personnel
Answer: A,B,C,D
NEW QUESTION 114
Which of the following does the encryption technology support for data during data transmission? (Multiple choice)
- A. Controllability
- B. Source verification
- C. Confidentiality
- D. Integrity
Answer: B,C,D
NEW QUESTION 115
Security technology has different methods at different technical levels and areas. Which of the following devices can be used for network layer security protection? (Multiple choice)
- A. Anti-DDoS device
- B. Firewall
- C. Vulnerability scanning device
- D. IPS/IDS device
Answer: A,B,D
NEW QUESTION 116
HRP (Huawei Redundancy Protocol) Protocol to back up the connection state of data include: (Multiple Choice)
- A. the routing table
- B. TCP/UDP sessions table
- C. the dynamic blacklist
- D. Server Map table
Answer: B,C,D
NEW QUESTION 117
Both A and B communicate data. If an asymmetric encryption algorithm is used for encryption, when A sends data to B, which of the following keys will be used for data encryption?
- A. B public key
- B. B private key
- C. A private key
- D. A public key
Answer: A
NEW QUESTION 118
Which of the following attacks is not a malformed message attack?
- A. Smurf attack
- B. ICMP unreachable packet attack
- C. TCP fragment attack
- D. Teardrop attack
Answer: B
NEW QUESTION 119
When the firewall hard disk is in place, which of the following is correct description for the firewall log?
- A. The administrator can use the threat log to understand the user's security risk behavior and the reason for being alarmed or blocked.
- B. The administrator can learn the security policy of the traffic hit through the policy hit log, and use it for fault location when the problem occurs.
- C. The administrator can advertise the content log to view the detection and defense records of network threats.
- D. The administrator knows the user's behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.
Answer: B
NEW QUESTION 120
Which of the following options does not include the respondents in the questionnaire for safety assessment?
- A. Technical leader
- B. HR
- C. Security administrator
- D. Network System Administrator
Answer: B
NEW QUESTION 121
Which of the following description is wrong about the Internet users and VPN access user authentication?
- A. The Internet user and the VPN access user share data, and the user's attribute check (user status, account expiration time, etc.) also takes effect on the VPN access.
- B. The local authentication or server authentication process is basically the same for the Internet users. The authentication is performed on the user through the authentication domain.
- C. After the VPN user accesses the network, it can access the network resources of the enterprise headquarters. The firewall can control the accessible network resources based on the user name.
- D. After the VPN access user passes the authentication, it will be online on the user online list.
Answer: D
NEW QUESTION 122
Which of the following is an action to be taken during the eradication phase of the cybersecurity emergency response? (Multiple Choice)
- A. Find sick Trojans, illegal authorization, system vulnerabilities, and deal with it in time
- B. Block the behavior of the attack, reduce the scope of influence
- C. Confirm the damage caused by security incidents and report security incidents
- D. Revise the security policy based on the security incident that occurred, enable security auditing
Answer: A,D
NEW QUESTION 123
ASPF (Application Specific Packet Filter) is a kind of packet filtering based on the application layer, it checks the application layer protocol information and monitor the connection state of the application layer protocol. ASPF by Server Map table achieves a special security mechanism.
Which statement about ASPF and Server map table are correct? (Multiple choice)
- A. ASPF monitors the packets in the process of communication
- B. quintuple server-map entries achieve a similar functionality with session table
- C. ASPF dynamically create and delete filtering rules
- D. ASPF through server map table realize dynamic to allow multi-channel protocol data to pass
Answer: A,C,D
NEW QUESTION 124
Which types of encryption technology can be divided into? (Multiple Choice)
- A. Fingerprint encryption
- B. Symmetric encryption
- C. Data encryption
- D. Asymmetric encryption
Answer: B,D
NEW QUESTION 125
Antivirus software and host firewall have the same effect.
- A. False
- B. True
Answer: A
NEW QUESTION 126
To implement the " anti-virus function " in the security policy, you must perform a License activation.
- A. True
- B. False
Answer: A
NEW QUESTION 127
Which of the following behaviors is relatively safer when connecting to Wi-Fi in public places?
- A. Connect unencrypted free Wi-Fi for online shopping
- B. Connect encrypted free Wi-Fi for online transfer operations
- C. Connect to the paid Wi-Fi hotspot provided by the operator and only browse the web
- D. Connect Wi-Fi hotspots that are not encrypted
Answer: C
NEW QUESTION 128
The repair of anti-virus software only needs to be able to repair some system files that were accidentally deleted when killing the virus to prevent the system from crashing.
- A. True
- B. False
Answer: A
NEW QUESTION 129
The vulnerability that has not been discovered is the 0 day vulnerability.
- A. False
- B. True
Answer: A
NEW QUESTION 130
......
Tested Material Used To H12-711-ENU: https://www.testpdf.com/H12-711-ENU-exam-braindumps.html
